]> git.ipfire.org Git - thirdparty/systemd.git/commit - src/core/dbus-execute.c
core: add two new service settings ProtectKernelTunables= and ProtectControlGroups=
authorLennart Poettering <lennart@poettering.net>
Mon, 22 Aug 2016 16:43:59 +0000 (18:43 +0200)
committerDjalal Harouni <tixxdz@opendz.org>
Sun, 25 Sep 2016 08:18:48 +0000 (10:18 +0200)
commit59eeb84ba65483c5543d1bc840c2ac75642ef638
tree2195a40c7daf3575a8a7500bc8a82412056688ab
parent72246c2a654ead7f7ee6e7799161e2e46dc0b84b
core: add two new service settings ProtectKernelTunables= and ProtectControlGroups=

If enabled, these will block write access to /sys, /proc/sys and
/proc/sys/fs/cgroup.
man/systemd.exec.xml
src/core/dbus-execute.c
src/core/execute.c
src/core/execute.h
src/core/load-fragment-gperf.gperf.m4
src/core/namespace.c
src/core/namespace.h
src/shared/bus-unit-util.c
src/test/test-ns.c